Bug 2320733 (CVE-2022-49005) - CVE-2022-49005 kernel: ASoC: ops: Fix bounds check for _sx controls
Summary: CVE-2022-49005 kernel: ASoC: ops: Fix bounds check for _sx controls
Keywords:
Status: NEW
Alias: CVE-2022-49005
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-10-21 21:05 UTC by OSIDB Bzimport
Modified: 2024-10-26 05:38 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2024-10-21 21:05:45 UTC 
In the Linux kernel, the following vulnerability has been resolved:

ASoC: ops: Fix bounds check for _sx controls

For _sx controls the semantics of the max field is not the usual one, max
is the number of steps rather than the maximum value. This means that our
check in snd_soc_put_volsw_sx() needs to just check against the maximum
value.
Comment 1 Avinash Hanwate 2024-10-22 06:21:06 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024102151-CVE-2022-49005-c5ba@gregkh/T
Note You need to log in before you can comment on or make changes to this bug.